DFARS 7012 ERP CUI Boundary: Does Your ERP Fit Inside the CUI Boundary?
For defense manufacturers, an ERP sits inside the CUI boundary only when it stores, processes, or transmits Controlled Unclassified Information. This guide explains how DFARS 252.204-7012, DFARS 252.204-7021, NIST SP 800-171, and FedRAMP Moderate equivalency shape the decision to place CUI in the ERP—or keep it out entirely.